Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json)
Hash identifier: db69G2WcD6x1bpz7z0kQrXEFxb78vgeacfQwtSGWSe4=
Subject key identifier: 30:85:0B:31:67:A0:73:2D:E4:76:4D:A2:34:FD:D0:8B:BD:BC:BD:EF
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 0198D5162A8F77E86F3C0C763232E11873E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
Manifest number: 0834
Signing time: Sat 23 Aug 2025 04:00:56 +0000
Manifest this update: Sat 23 Aug 2025 04:00:56 +0000
Manifest next update: Sun 24 Aug 2025 04:00:56 +0000
Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: c2EBzN5Kne3fhgGYmO3+x63jLlf1iBinDI0Lplgb3cQ=)
2: takXMVWWq86gQFEdW1EUOBKN5bA.roa (hash: aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2a:8f:77:e8:6f:3c:0c:76:32:32:e1:18:73:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: Aug 23 04:00:56 2025 GMT
Not After : Aug 24 04:00:56 2025 GMT
Subject: CN=30850b3167a0732de4764da234fdd08bbdbcbdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:47:26:1c:8b:4f:19:f7:df:d4:3a:34:75:
f2:97:ed:b1:d7:e9:01:c4:27:0c:05:04:d8:40:e4:
44:1b:27:0b:95:53:1c:71:00:29:a9:09:84:60:40:
f6:26:a4:45:d4:e1:8f:fd:af:cc:14:06:fd:25:54:
ff:45:b0:af:1e:91:44:fb:28:8d:af:7a:2f:69:37:
56:4f:af:e1:c3:57:69:db:20:9b:1e:e7:e1:bd:81:
97:96:25:0b:2d:e0:73:78:50:de:40:5e:22:a7:ba:
47:09:27:c3:d5:10:4a:e7:b9:a4:54:c8:8a:1e:3f:
ad:25:e0:ba:c4:66:10:d1:39:a6:ac:02:76:f1:83:
7e:a1:db:d0:bf:7c:3a:96:23:d0:26:14:59:a3:ea:
fc:02:fc:d9:99:d7:3c:ab:a6:0e:b3:e9:ca:ec:88:
f0:d9:5b:e1:50:c2:4f:36:74:dc:da:62:fe:ed:f9:
50:54:a8:d4:89:03:56:10:57:46:e3:18:ef:97:82:
dc:1c:aa:15:c5:43:ac:e4:6a:3f:2f:d2:a2:ed:02:
5e:38:6f:2b:32:3b:3f:24:3e:56:89:ea:1e:ad:9e:
2c:35:40:7d:7f:91:27:3f:b1:66:db:4f:e9:b8:45:
32:18:17:b5:da:cc:7b:dc:a6:94:31:8f:11:4e:94:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:0B:31:67:A0:73:2D:E4:76:4D:A2:34:FD:D0:8B:BD:BC:BD:EF
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cf:9d:e8:a9:ab:82:10:d2:cb:23:75:ee:33:75:99:13:3d:
fa:fb:01:ef:7b:22:08:67:57:16:a7:fd:40:54:19:1e:85:9c:
a1:c0:91:79:91:b8:8b:54:97:8e:1d:e7:2b:f6:aa:55:da:3c:
23:e1:1e:39:da:1c:95:23:6b:99:fd:2e:30:fb:18:5f:c4:06:
d6:02:62:b4:aa:b4:4b:d1:48:a6:d9:bf:ef:1e:9b:e6:e0:86:
86:bd:f7:5a:c4:61:ec:b3:11:f8:66:fc:97:2a:aa:03:25:a4:
80:0e:9d:36:06:59:ef:e6:5e:12:36:d5:33:07:71:89:1e:3a:
b5:fa:d1:f5:08:57:35:0e:e2:f4:9d:01:61:c9:25:19:3e:0a:
05:fe:c1:29:4e:e9:50:ca:97:86:c8:64:61:18:52:30:cf:f8:
b2:e6:78:e0:0f:a0:d1:4c:c4:a5:4f:40:10:48:26:4a:a3:74:
8c:4c:67:2c:10:4d:43:2a:d1:24:e4:1b:b7:3e:92:d9:95:16:
6c:f3:f6:1e:0b:dc:18:04:62:71:6e:80:39:b6:15:14:73:d0:
5c:eb:ee:8d:84:21:58:57:b0:cd:c0:fe:35:fe:db:86:2a:53:
fa:70:67:ea:fd:58:b3:4e:55:4b:8b:e4:ad:5c:63:00:02:ec:
13:24:4e:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFiqPd+hvPAx2MjLhGHPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZGQ5YTEzM2E5MjQ4NmExNGVkYzRlNzYyNWIyNGY5NWQz
ODkxY2MwHhcNMjUwODIzMDQwMDU2WhcNMjUwODI0MDQwMDU2WjAzMTEwLwYDVQQD
EygzMDg1MGIzMTY3YTA3MzJkZTQ3NjRkYTIzNGZkZDA4YmJkYmNiZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi55HJhyLTxn339Q6NHXyl+2x1+kB
xCcMBQTYQOREGycLlVMccQApqQmEYED2JqRF1OGP/a/MFAb9JVT/RbCvHpFE+yiN
r3ovaTdWT6/hw1dp2yCbHufhvYGXliULLeBzeFDeQF4ip7pHCSfD1RBK57mkVMiK
Hj+tJeC6xGYQ0TmmrAJ28YN+odvQv3w6liPQJhRZo+r8AvzZmdc8q6YOs+nK7Ijw
2VvhUMJPNnTc2mL+7flQVKjUiQNWEFdG4xjvl4LcHKoVxUOs5Go/L9Ki7QJeOG8r
Mjs/JD5WieoerZ4sNUB9f5EnP7Fm20/puEUyGBe12sx73KaUMY8RTpTP6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCFCzFnoHMt5HZNojT90Iu9vL3vMB8GA1UdIwQY
MBaAFEvdmhM6kkhqFO3E52JbJPldOJHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAt
YjcwNGVlMjdjNjVjLzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAtYjcwNGVlMjdjNjVj
LzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABs+d6Kmr
ghDSyyN17jN1mRM9+vsB73siCGdXFqf9QFQZHoWcocCReZG4i1SXjh3nK/aqVdo8
I+EeOdoclSNrmf0uMPsYX8QG1gJitKq0S9FIptm/7x6b5uCGhr33WsRh7LMR+Gb8
lyqqAyWkgA6dNgZZ7+ZeEjbVMwdxiR46tfrR9QhXNQ7i9J0BYcklGT4KBf7BKU7p
UMqXhshkYRhSMM/4suZ44A+g0UzEpU9AEEgmSqN0jExnLBBNQyrRJOQbtz6S2ZUW
bPP2HgvcGARicW6AObYVFHPQXOvujYQhWFewzcD+Nf7bhipT+nBn6v1Ys05VS4vk
rVxjAALsEyROAw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:46 2025 by rpki-client